import uid_wrapper-1.2.7-7.el9

2021-11-04 05:08:50 -04:00 · 2021-11-04 05:08:50 -04:00 · 6ad90f13e5
commit 6ad90f13e5
6 changed files with 241 additions and 0 deletions
--- a/.gitignore
+++ b/.gitignore
@ -0,0 +1,2 @@
+SOURCES/uid_wrapper-1.2.7.tar.gz
+SOURCES/uid_wrapper.keyring
--- a/.uid_wrapper.metadata
+++ b/.uid_wrapper.metadata
@ -0,0 +1,2 @@
+7a3b027c8eea8868d19d893a16c1e8fadfa2fe79 SOURCES/uid_wrapper-1.2.7.tar.gz
+3f2ab0bca02893402ba0ad172a6bd44456a65f86 SOURCES/uid_wrapper.keyring
--- a/SOURCES/0001-pkg-config-Fix-installation-path.patch
+++ b/SOURCES/0001-pkg-config-Fix-installation-path.patch
@ -0,0 +1,23 @@
+From 7b3211858d07cb93f89c1fd5eaa178f14e1f1968 Mon Sep 17 00:00:00 2001
+From: Andreas Schneider <asn@samba.org>
+Date: Wed, 12 Feb 2020 09:52:40 +0100
+Subject: [PATCH] pkg-config: Fix installation path
+
+Signed-off-by: Andreas Schneider <asn@samba.org>
+---
+ uid_wrapper.pc.cmake | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/uid_wrapper.pc.cmake b/uid_wrapper.pc.cmake
+index c15d3be..7e0095c 100644
+--- a/uid_wrapper.pc.cmake
+++ b/uid_wrapper.pc.cmake
+@@ -1,4 +1,4 @@
+ Name: @PROJECT_NAME@
+ Description: The uid_wrapper library
+ Version: @PROJECT_VERSION@
+-Libs: @CMAKE_INSTALL_LIBDIR@/@UID_WRAPPER_LIB@
+Libs: @CMAKE_INSTALL_FULL_LIBDIR@/@UID_WRAPPER_LIB@
+-- 
+2.24.1
+
--- a/SOURCES/uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch
+++ b/SOURCES/uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch
@ -0,0 +1,6 @@
+index 0a3e3fd..43ab1fa 100644
+--- a/uid_wrapper-config.cmake.in
+++ b/uid_wrapper-config.cmake.in
+@@ -1 +1 @@
+-set(UID_WRAPPER_LIBRARY @CMAKE_INSTALL_LIBDIR@/@UID_WRAPPER_LIB@)
+set(UID_WRAPPER_LIBRARY @CMAKE_INSTALL_FULL_LIBDIR@/@UID_WRAPPER_LIB@)
--- a/SOURCES/uid_wrapper-1.2.7.tar.gz.asc
+++ b/SOURCES/uid_wrapper-1.2.7.tar.gz.asc
@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=vJOX
+-----END PGP SIGNATURE-----
--- a/SPECS/uid_wrapper.spec
+++ b/SPECS/uid_wrapper.spec
@ -0,0 +1,192 @@
+Name:           uid_wrapper
+Version:        1.2.7
+Release:        7%{?dist}
+
+Summary:        A wrapper for privilege separation
+License:        GPLv3+
+Url:            http://cwrap.org/
+
+Source0:        https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz
+Source1:        https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc
+Source2:        uid_wrapper.keyring
+
+Patch0:         0001-pkg-config-Fix-installation-path.patch
+Patch1:         uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch
+
+BuildRequires:  gcc
+BuildRequires:  cmake
+BuildRequires:  gnupg2
+BuildRequires:  libcmocka-devel >= 1.1.0
+
+Recommends:     cmake
+Recommends:     pkgconfig
+
+%description
+Some projects like a file server need privilege separation to be able to switch
+to the connection user and do file operations. uid_wrapper convincingly lies
+to the application letting it believe it is operating as root and even
+switching between UIDs and GIDs as needed.
+
+To use it set the following environment variables:
+
+LD_PRELOAD=libuid_wrapper.so
+UID_WRAPPER=1
+
+This package doesn't have a devel package cause this project is for
+development/testing.
+
+%prep
+gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
+%autosetup -p1
+
+%build
+%cmake \
+  -DUNIT_TESTING=ON
+%cmake_build
+
+%install
+%cmake_install
+
+%ldconfig_scriptlets
+
+%check
+%ctest
+
+%files
+%doc AUTHORS README.md ChangeLog
+%license LICENSE
+%{_libdir}/libuid_wrapper.so*
+%dir %{_libdir}/cmake
+%dir %{_libdir}/cmake/uid_wrapper
+%{_libdir}/cmake/uid_wrapper/uid_wrapper-config-version.cmake
+%{_libdir}/cmake/uid_wrapper/uid_wrapper-config.cmake
+%dir %{_libdir}/pkgconfig
+%{_libdir}/pkgconfig/uid_wrapper.pc
+%{_mandir}/man1/uid_wrapper.1*
+
+%changelog
+* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.7-7
+- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
+  Related: rhbz#1991688
+
+* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.7-6
+- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
+
+* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.7-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
+
+* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.7-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
+
+* Tue Mar 03 2020 Anderson Sasaki <ansasaki@redhat.com> - 1.2.7-3
+- Fix invalid library path in cmake configuration file (bz#1809275)
+
+* Wed Feb 12 2020 Andreas Schneider <asn@redhat.com> - 1.2.7-2
+- resolves: #1801869 - Fix invalid lib pkg-config lib path
+
+* Tue Feb 11 2020 Andreas Schneider <asn@redhat.com> - 1.2.7-1
+- Update to version 1.2.7
+  * Fix unsetting initial XIDs
+  * Fix manpage installation
+  * Fix cmake-config installation
+  * Fixed running with sanitizers
+- resolves: #1690028 - Allow running without RTLD_DEEPBIND
+
+* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-6
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
+
+* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-5
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
+
+* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
+
+* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
+
+* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
+
+* Mon Jul 31 2017 Andreas Schneider <asn@redhat.com> - 1.2.4-1
+- Update to version 1.2.4
+  * Added deadlock workaround for glibc < 2.24
+  * Fixed a possible deadlock bug if uid_wrapper is turned off
+  * Logging is always turned on now
+  * Fixed a memory leak
+  * Limited number of groups during fork+exec
+
+* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.2-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
+
+* Thu Jul 13 2017 Andreas Schneider <asn@redhat.com> - 1.2.2-1
+- Update to version 1.2.2:
+  * Added support for fork'ed and then exec'ed processes
+  * Added support for Alpha
+
+* Tue Jun 27 2017 Nils Philippsen <nils@redhat.com> - 1.2.1-3
+- drop requirements on cmake, pkgconfig and rather own the directories for the
+  files augmenting these packages
+
+* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.1-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
+
+* Wed Mar 23 2016 Andreas Schneider <asn@redhat.com> - 1.2.1-1
+- Update to version 1.2.1
+  * Documented missing options.
+  * Fixed a comipilation issue with -O3.
+
+* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
+
+* Thu Oct 29 2015 Andreas Schneider <asn@redhat.com> - 1.2.0-1
+- Update to version 1.2.0
+  * Added privilege checks for all set*uid and set*gid functions.
+  * Added a lot more and accurate tests which work as root.
+  * Fixed some minor issues
+
+* Wed Sep 02 2015 Andreas Schneider <asn@redhat.com> - 1.1.1-1
+- Update to version 1.1.1
+
+* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.0-2
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
+
+* Wed Jan 21 2015 Andreas Schneider <asn@redhat.com> - 1.1.0-1
+- Update to version 1.1.0
+
+* Mon Dec 15 2014 Michael Adam <madam@redhat.com> - 1.0.2-5
+- Fix format errors in changelog.
+- Require cmake.
+- Don't own _libdir/pkgconfig, and require pkgconfig instead.
+
+* Thu Oct 02 2014 Andreas Schneider <asn@redhat.com> - 1.0.2-4
+- resolves: #1146410 - Do not own /usr/lib64/cmake.
+
+* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-3
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
+
+* Mon Aug 04 2014 Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 1.0.2-2
+- Handle lack of SYS_access on AArch64
+
+* Thu Jul 31 2014 Andreas Schneider <asn@redhat.com> - 1.0.2-1
+- Update to version 1.0.2.
+
+* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.1-4
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
+
+* Tue Mar 11 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-3
+- Fix some typos.
+- resolves: #1060910 - Fedora import
+
+* Tue Feb 11 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-2
+- Remove Group
+- Remove glibc-devel build requirement
+- Do not create a subpackage.
+
+* Tue Feb 04 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-1
+- Update to version 1.0.1
+  * Added --libs to pkg-config.
+  * Added socket_wrapper-config.cmake
+  * Fixed a bug packaging the obj directory.
+
+* Mon Feb 03 2014 Andreas Schneider <asn@redhat.com> - 1.0.0-1
+- Initial version 1.0.0